Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/323030313a313261303a3a2f33322d3438203d3e203238323932.roa
File:                     323030313a313261303a3a2f33322d3438203d3e203238323932.roa (raw, json)
Hash identifier:          r5ujMhwchVmXLMZpNcFaPmBzk9WdaGlS0uSL/WjRLrE=
Subject key identifier:   20:8A:BB:38:21:D9:21:91:44:28:CC:0F:62:BB:33:39:A8:0B:EA:DC
Certificate issuer:       /CN=7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A
Certificate serial:       27E4D33F8ECC793B3DDE99E455064F71398F5FDD
Authority key identifier: 7A:2D:15:9B:5A:87:EF:DC:2D:93:1E:E9:F5:88:A9:32:E1:C9:DE:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/323030313a313261303a3a2f33322d3438203d3e203238323932.roa
Signing time:             Thu 03 Aug 2023 14:00:01 +0000
ROA not before:           Thu 03 Aug 2023 13:55:01 +0000
ROA not after:            Sat 03 Aug 2024 14:00:01 +0000
asID:                     28292
IP address blocks:        2001:12a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e4:d3:3f:8e:cc:79:3b:3d:de:99:e4:55:06:4f:71:39:8f:5f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A
        Validity
            Not Before: Aug  3 13:55:01 2023 GMT
            Not After : Aug  3 14:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:bb:4b:e5:b1:39:3e:a4:ab:27:10:6f:e8:
                    08:52:a9:16:a9:54:e2:bb:83:1b:86:0e:d9:91:5c:
                    6f:fa:02:66:79:68:66:10:07:2d:e0:33:8b:41:1b:
                    ea:af:bd:e0:f6:af:d7:9d:f3:32:ac:ce:45:0e:a2:
                    58:33:c2:4c:ed:1c:b1:af:df:5b:c5:45:3f:1d:aa:
                    5e:25:f0:70:c0:34:92:bd:fd:a6:fd:f9:5f:f1:a2:
                    39:c4:a1:64:c8:af:85:d3:35:2a:66:81:53:29:4e:
                    8f:46:4c:23:5c:58:e1:9c:9b:a8:d9:1c:9d:0d:64:
                    e6:02:a8:d2:a2:03:8f:2e:89:00:69:04:c4:84:c3:
                    22:fb:5f:38:36:97:fa:0a:82:83:c6:bb:b3:86:08:
                    c3:5f:ed:8d:91:31:31:8e:2a:c0:57:a2:fb:e7:ce:
                    e1:ff:6e:30:78:2e:4c:51:d5:3e:a2:68:be:58:56:
                    a5:60:23:f9:15:d6:cf:ba:70:19:a8:cc:ee:1a:6f:
                    a9:e7:e0:ad:96:2c:ac:21:ae:db:ed:51:8a:24:19:
                    c9:59:6e:9a:e2:5a:83:85:d5:f9:79:8f:1d:a7:55:
                    4d:17:78:0b:7d:d8:af:b0:7c:50:8d:80:21:8c:2c:
                    a5:c4:2d:81:6e:90:00:af:38:4c:46:43:89:1a:a1:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8A:BB:38:21:D9:21:91:44:28:CC:0F:62:BB:33:39:A8:0B:EA:DC
            X509v3 Authority Key Identifier:
                keyid:7A:2D:15:9B:5A:87:EF:DC:2D:93:1E:E9:F5:88:A9:32:E1:C9:DE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/323030313a313261303a3a2f33322d3438203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:cb:8f:e5:33:df:84:a4:85:b5:67:a0:57:81:ea:5b:f6:
         91:35:bc:0f:70:59:f6:59:6f:74:63:69:8d:b5:99:c1:7c:d5:
         a0:3e:09:f0:e6:4a:41:a4:2d:b3:2d:59:0c:20:e8:b1:44:db:
         bd:af:db:18:8d:b6:6e:44:2a:fa:94:fa:31:40:a4:f5:47:ea:
         42:1d:a5:69:77:20:2d:24:b4:b9:a6:da:8f:3d:f5:72:2a:00:
         45:d0:4b:6e:5d:0a:ba:81:c4:23:9e:6f:ba:a5:8c:79:51:87:
         af:b9:fc:ab:a1:e0:7b:41:74:c5:69:84:69:a3:d8:ac:56:74:
         b2:91:a1:c6:36:26:b8:7f:2c:94:f7:7d:09:2d:c9:8e:02:10:
         af:33:6c:5a:54:aa:43:5c:6b:41:9c:11:41:d3:d9:d1:8b:af:
         8c:c0:4b:39:17:72:3a:9a:82:1b:e6:e1:b4:7f:07:a7:aa:48:
         8a:f3:44:62:cf:e9:00:32:e3:09:f8:2d:d5:36:3d:25:c7:4d:
         18:6b:65:cd:90:50:fc:2d:83:a2:8d:2c:8c:81:4c:a3:05:5e:
         76:74:3b:59:04:00:9e:16:ac:43:a1:45:fc:03:77:42:e1:f3:
         68:6b:74:03:46:c2:38:41:1d:39:5e:19:df:b7:0d:d7:8f:35:
         91:4d:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:37 2025 by rpki-client